| 3
|
#39473
|
get_routes() called multiple times within single REST request causing the rest_endpoints() filter to also fire more than once
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
4 weeks ago
|
| 1
|
#54387
|
trailing slash in the url /wp-json
|
|
REST API
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
dev-feedback
|
2 years ago
|
| 6
|
#29276
|
Ability to edit and preview any revision, not just autosaves
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
| 3
|
#47518
|
Add an explanatory message to the Revisions screen for locked posts
|
adamsilverstein
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
5 years ago
|
| 10
|
#38368
|
Add front-end revision browsing
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 29
|
#23314
|
Allow published posts to be revised without being updated immediately
|
|
Revisions
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
7 years ago
|
| 2
|
#44786
|
Autosave: Conditionally allow revisions to be saved
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
8 years ago
|
| 1
|
#47831
|
Compare any two revisions: Improve the distinction of From/To columns
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
| 2
|
#48574
|
Create better post diff screens
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
|
|
#61849
|
Improve performance and memory usage of wp_list_post_revisions() / wp_get_post_revisions()
|
|
Revisions
|
normal
|
normal
|
Future Release
|
enhancement
|
reporter-feedback
|
6 months ago
|
|
|
#57395
|
Improve wp_die message when previewing post revision with expired nonce and unauthenticated requests
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
4 years ago
|
| 7
|
#40577
|
Introduce a capability for viewing the revisions of a post
|
adamsilverstein
|
Revisions
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
3 years ago
|
| 2
|
#48315
|
Scheduling already published posts or pages causes 404 error on page
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
|
|
#56576
|
When post is switched from published to draft, create revision
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
10 months ago
|
|
|
#56592
|
Add filter to wp_redirect_admin_locations()
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
|
#43678
|
Add indents to default .htaccess rules
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
8 years ago
|
| 1
|
#46283
|
Allow filtering post-type archive rewrites
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
11 months ago
|
| 57
|
#34136
|
Allow register_post_type's rewrite to remove CPT slug
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
10 months ago
|
| 3
|
#18877
|
DRY up rewrite rule matching
|
ericlewis
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
4 years ago
|
| 10
|
#14502
|
Enable /post-type/taxonomy/term/ permalinks
|
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
enhancement
|
|
7 years ago
|
|
|
#34776
|
Introduced the `$site_root` and `$home_root` parameter in `mod_rewrite_rules`
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
8 years ago
|
|
|
#64037
|
New filters for managing rewrite rules
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
10 months ago
|
| 9
|
#18450
|
New safe action to add rewrite rules on
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
8 years ago
|
|
|
#41946
|
Option to delete_with_markers
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
9 years ago
|
| 19
|
#29118
|
Registering rewrite rules is hard, so let's introduce remove_rewrite_rule.
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
2 years ago
|
|
|
#46087
|
Short-circuit `page_on_front` check during site creation
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
7 years ago
|
| 5
|
#36691
|
Ability to disable "Password Protected" post option
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#52350
|
Add documentation about meta capabilities
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
needs-docs
|
5 years ago
|
| 1
|
#44017
|
Add filter to display edit post link without 'edit_post' capability
|
|
Role/Capability
|
normal
|
major
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
10 months ago
|
|
|
#42589
|
Add missing "third argument" documentation to user_can()
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
8 years ago
|
|
|
#54554
|
Allow returning content for wp_dropdown_roles()
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
4 years ago
|
| 1
|
#64306
|
Enhancements: Add 'designer' user role, Collaborator groups/teams, display multiple contributor types and co-authors, contributor heirarchy on posts/pages
|
|
Role/Capability
|
low
|
trivial
|
Awaiting Review
|
enhancement
|
|
8 months ago
|
|
|
#62959
|
Ensure wp_roles() returns an instance of WP_Roles
|
|
Role/Capability
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
has-patch
|
17 months ago
|
| 3
|
#40320
|
Feature idea: Rename roles
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
3 years ago
|
| 8
|
#33240
|
Introduce a capability for previewing posts
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
9 years ago
|
| 1
|
#44468
|
Introduce infrastructure for testing primitive capabilities granted via `user_has_cap`
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
7 years ago
|
| 1
|
#42405
|
Introduce singular capabilities for enabling individual themes on Multisite
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
9 years ago
|
|
|
#41701
|
Introduce singular capabilities for further management of individual plugins
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
9 years ago
|
| 1
|
#43210
|
Introduce singular capabilities for managing individual options
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
8 years ago
|
| 1
|
#42404
|
Introduce singular capabilities for managing individual plugins
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
14 months ago
|
|
|
#41703
|
Introduce singular capabilities for network activation and deactivation of individual plugins
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
6 years ago
|
|
|
#56373
|
La EDICION de Contenidos y los ROLES de Usuario
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 33
|
#17924
|
Make Integrating Multiple Roles Per User Easier for Plugin Authors
|
|
Role/Capability
|
normal
|
major
|
Awaiting Review
|
enhancement
|
dev-feedback
|
5 years ago
|
| 2
|
#41674
|
More granular capabilities for restoring and permanently deleting trashed posts
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
needs-unit-tests
|
11 months ago
|
| 9
|
#20152
|
Multisite simplify option name to user_roles
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-refresh
|
8 years ago
|
|
|
#23391
|
User in contributor role can add images to post only via the text editor
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 3
|
#43885
|
WP_Role and WP_Roles::get_role() missing Display Name
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
11 months ago
|
|
|
#61356
|
Add $is_module as an extra strategy argument when enqueueing js script.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
2 years ago
|
|
|
#51325
|
Add a filter for script/style tags injected by wp_add_inline_{script|style}
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-refresh
|
3 years ago
|
|
|
#65607
|
Add font-display: swap option when enqueuing/loading Google or local fonts on the frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
11 days ago
|
| 3
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
| 3
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
11 months ago
|
|
|
#52465
|
Allow a relation type in resource hints to be used multiple times
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
5 years ago
|
| 10
|
#54018
|
Allow scripts registered via block.json to be enqueued in the footer
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
9 months ago
|
| 4
|
#51200
|
Consider a better way to deprecate JavaScript code
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
|
#59132
|
Create two filters in wp_scripts() and wp_styles().
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
3 years ago
|
| 4
|
#58302
|
Deprecate and disable the unused compression_test() and wp_ajax_wp_compression_test()
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
changes-requested
|
9 months ago
|
|
|
#60734
|
Deregistering Open Sans
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
| 2
|
#63805
|
Extend the existing conditional loading optimization for block-specific global styles from core blocks to include third-party blocks, improving performance by only loading styles for blocks actually present on the page.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
changes-requested
|
9 months ago
|
| 4
|
#55639
|
Implement Async CSS
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
14 months ago
|
| 1
|
#40602
|
Implement immutable cache headers
|
pbearne
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
17 months ago
|
| 1
|
#63793
|
Parser-blocking scripts should render last in all cases to speed up page load
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
11 months ago
|
|
|
#59076
|
Proposal for removing the version numbers of the JS and CSS files when SCRIPT_DEBUG is set to true
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
11 months ago
|
| 2
|
#51317
|
Remove deprecated JavaScript i18n globals
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
3 months ago
|
| 3
|
#60234
|
Script Modules API: Add a translations API
|
|
Script Loader
|
normal
|
normal
|
7.2
|
enhancement
|
|
11 days ago
|
| 6
|
#60597
|
Script Modules API: Allow list of enqueued module data to be exposed
|
westonruter
|
Script Loader
|
normal
|
normal
|
7.2
|
enhancement
|
has-patch
|
7 days ago
|
| 2
|
#62709
|
Script modules integration with wp_resource_hints
|
|
Script Loader
|
normal
|
minor
|
7.2
|
enhancement
|
has-patch
|
6 days ago
|
| 20
|
#57548
|
Stop concatenating scripts and stylesheets in wp-admin and retire load-scripts.php and load-styles.php
|
westonruter*
|
Script Loader
|
normal
|
normal
|
7.2
|
enhancement
|
has-patch
|
7 days ago
|
| 2
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
9 years ago
|
| 1
|
#43781
|
adding apply_filters on $handle in localize
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 2
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
8 weeks ago
|
|
|
#56425
|
wp_localize_script assign to const and freeze instead of var to avoid reassignments
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
4 years ago
|
| 5
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#62384
|
.htaccess lacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
20 months ago
|
| 6
|
#63727
|
A new function to sanitize an array
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
12 months ago
|
| 8
|
#37757
|
Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
15 months ago
|
| 14
|
#23165
|
Admin validation errors on form nonce element IDs (_wpnonce)
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
5 years ago
|
| 3
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
| 5
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 23
|
#56141
|
Enhance installer security
|
|
Security
|
high
|
major
|
Future Release
|
enhancement
|
dev-feedback
|
3 weeks ago
|
|
|
#51611
|
Escape echoing Core functions
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
| 1
|
#64481
|
Explore Sec-Fetch Headers as a Core-Supported CSRF Mitigation Mechanism
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
| 39
|
#28521
|
FORCE_SSL constant for really forcing SSL
|
adamsilverstein
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
3 weeks ago
|
| 1
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
Security
|
low
|
minor
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 2
|
#62949
|
HttpOnly flag for the post password cookie
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
17 months ago
|
| 3
|
#44058
|
Include security sniffs in PHPCS ruleset
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
8 years ago
|
| 7
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
| 2
|
#36087
|
Migration plan from insecure RNG fallback
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
6 years ago
|
| 13
|
#51407
|
Remove inline event handlers and JavaScript URIs for Strict CSP-compatibility
|
adamsilverstein
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
7 days ago
|
| 7
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 2
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
17 months ago
|
| 35
|
#37000
|
Support for the SameSite cookie attribute
|
johnbillion*
|
Security
|
normal
|
normal
|
7.2
|
enhancement
|
has-patch
|
6 days ago
|
| 3
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
5 years ago
|
| 1
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
|
#63329
|
Use check_ajax_referer() instead of check_admin_referer() for AJAX requests in media form handling.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
15 months ago
|
| 1
|
#65448
|
Use the new Uri\Rfc3986\Uri::parse in wp_parse_url() if PHP 8.5 is available
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
changes-requested
|
4 weeks ago
|
| 5
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
19 months ago
|
| 10
|
#38474
|
wp_signups.activation_key stores activation keys in plain text
|
SergeyBiryukov
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
3 weeks ago
|
| 5
|
#47616
|
Enhancement: doing_shortcode() function similar to doing_filter()
|
audrasjb*
|
Shortcodes
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
5 years ago
|